Technical Tip: LDAP error when trying to verify password

It is observed when trying to verify a password for a target that the following error is encountered:

The above can be seen when navigating to Secrets -> Select the secret with issue -> Logs.

Reason:

This is because the 'domain' parameter is not defined for the secret, and this can be checked on the CLI.

Debug commands:

diagnose wad debug enable category secret

diagnose wad debug enable category pwdchg

diagnose debug enable

Example:

Solution:

Once the 'domain' parameter is defined, the issue will be resolved.

LDAP configuration: (User management -> LDAP Servers).

The domain, as per the configuration, is 'kj.ftnt'.

config secret target
    edit "10.47.1.41" ----------> Name given to the target.
        set class "Other"
        set template "Testing-RDP-cust"
        set address "10.47.1.41"
        set domain "kj.ftnt"
    next
end

Debug exhibiting successful password verification and domain name binding: